setroubleshoot's service startup is one of the noticably longest steps in the
boot process. Would be nice if we could get the notifications it sends
happening directly from auditd rather than having two different things needing
to start.